Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/qeCFfBD4mXwl6Ct6OIjI7qGdmJM.roa
File: qeCFfBD4mXwl6Ct6OIjI7qGdmJM.roa (raw, json)
Hash identifier: 382sm8BB5Jb6DI0LE2RSajQRto4hUu7FYRsrnVbGSOA=
Subject key identifier: A9:E0:85:7C:10:F8:99:7C:25:E8:2B:7A:38:88:C8:EE:A1:9D:98:93
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 0E4061F6
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/qeCFfBD4mXwl6Ct6OIjI7qGdmJM.roa
Signing time: Sat 01 Jan 2022 01:02:04 +0000
ROA not before: Sat 01 Jan 2022 01:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198167
IP address blocks: 185.138.222.0/23 maxlen: 23
185.138.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239100406 (0xe4061f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Jan 1 01:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9e0857c10f8997c25e82b7a3888c8eea19d9893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:5a:03:e3:81:3f:51:ad:75:88:67:49:47:
66:aa:e0:78:14:b0:67:3d:07:93:53:24:ff:ee:20:
2c:98:f4:86:3c:9d:96:23:80:46:04:bf:03:9f:64:
5b:34:41:30:4f:6e:f5:ca:2f:a2:bc:2f:a4:e7:56:
4d:39:43:bb:a4:57:ac:67:ef:4c:3a:e3:06:08:a8:
f0:9a:86:c8:f1:ce:f4:e4:d0:15:5f:01:2a:e2:5d:
c6:95:70:53:4a:df:c4:d1:05:d5:47:5b:69:8b:47:
ac:b0:5e:53:82:2c:45:bf:e5:90:3d:fc:5d:b1:bf:
0d:35:70:5f:40:16:a6:8e:15:62:b1:a5:3c:a6:a9:
7f:ae:78:2f:92:8f:7b:88:70:9c:ed:11:f8:ce:88:
16:a3:40:92:1f:a0:23:f5:fe:06:50:14:f9:47:42:
f5:24:b2:9e:55:0d:0a:c4:f1:ac:25:e6:23:60:d7:
35:20:5f:fa:1a:00:32:36:08:46:88:e7:3f:60:ee:
d8:64:c0:f4:48:69:9e:94:fd:dd:ca:1f:6e:db:ab:
57:d5:c4:c7:78:08:5a:90:de:cf:35:dc:b4:08:31:
d6:03:e8:05:0f:d6:46:a8:d0:78:b2:59:b9:44:27:
bc:b2:3d:0c:4e:0c:25:43:42:e5:05:fa:1d:ec:30:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:85:7C:10:F8:99:7C:25:E8:2B:7A:38:88:C8:EE:A1:9D:98:93
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/qeCFfBD4mXwl6Ct6OIjI7qGdmJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.220.0/22
Signature Algorithm: sha256WithRSAEncryption
99:6f:a5:49:6f:e4:5d:6b:52:12:df:9c:fe:4c:4a:f0:db:ca:
00:68:ba:ed:a4:51:12:b9:13:39:4a:94:ce:d8:b5:30:70:b1:
32:65:f4:2a:dd:78:0e:6d:e0:9c:74:15:19:b1:bc:78:86:6d:
ac:f7:5f:ba:d3:c7:a7:fb:f4:f2:27:3c:1e:5e:0c:29:89:74:
1d:10:f3:dd:ee:d4:f4:99:60:8c:7c:81:b4:5a:8c:2a:96:a7:
02:23:37:ff:71:70:8c:10:74:24:88:27:cd:3c:f6:f4:44:4e:
3a:31:a7:86:ce:85:e3:18:ae:7b:c0:1c:8d:81:f6:82:9e:72:
e2:93:69:63:a9:e0:20:9d:c2:ad:da:bf:7f:7f:92:9c:05:4d:
48:1e:ab:47:dd:88:05:cc:17:1f:2c:28:db:2c:0e:79:ee:17:
fc:bd:54:78:12:b0:f0:22:f9:e0:75:25:d3:2e:df:65:b8:3d:
48:bb:8d:0f:d9:6d:2f:89:90:af:a3:3e:bf:f0:85:04:7f:d0:
72:84:b4:11:9e:f2:aa:a1:94:bc:a8:cf:49:12:44:3a:b7:a7:
71:5d:ef:e6:4d:51:fc:40:2c:0e:f8:df:65:0a:3d:86:88:d2:
b4:00:54:b6:da:9e:85:85:ef:b5:88:15:0f:05:d2:d9:f7:3b:
37:c5:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org